From 1a2a77454e04fb8970716e4bc2634ddc9f1d7a0d Mon Sep 17 00:00:00 2001
From: Zhenya Tikhonov <zhenya.tikhonov@octopus.com>
Date: Sun, 24 Nov 2024 13:51:05 +0400
Subject: [PATCH] build: upgrade `venona` (#530)

---
 charts/cf-runtime/Chart.yaml  | 6 ++----
 charts/cf-runtime/README.md   | 4 ++--
 charts/cf-runtime/values.yaml | 4 ++--
 3 files changed, 6 insertions(+), 8 deletions(-)

diff --git a/charts/cf-runtime/Chart.yaml b/charts/cf-runtime/Chart.yaml
index 589c1dd7..59e32dce 100644
--- a/charts/cf-runtime/Chart.yaml
+++ b/charts/cf-runtime/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 description: A Helm chart for Codefresh Runner
 name: cf-runtime
-version: 7.1.6
+version: 7.1.7
 keywords:
   - codefresh
   - runner
@@ -18,9 +18,7 @@ annotations:
   # Supported kinds: `added`, `changed`, `deprecated`, `removed`, `fixed`, `security`:
   artifacthub.io/changes: |
     - kind: security
-      description: "Allow on-prem customers to define which QEMU images are trusted for docker buildx builds rather than allowing all QEMU images"
-    - kind: security
-      description: "Stop the engine from printing out the contents of the environment variables file which can contain secrets"
+      description: "Upgrade `venona` to the latest version with multiple security fixes"
 dependencies:
   - name: cf-common
     repository: oci://quay.io/codefresh/charts
diff --git a/charts/cf-runtime/README.md b/charts/cf-runtime/README.md
index 9156589e..4bd2cc66 100644
--- a/charts/cf-runtime/README.md
+++ b/charts/cf-runtime/README.md
@@ -1,6 +1,6 @@
 ## Codefresh Runner
 
-![Version: 7.1.6](https://img.shields.io/badge/Version-7.1.6-informational?style=flat-square)
+![Version: 7.1.7](https://img.shields.io/badge/Version-7.1.7-informational?style=flat-square)
 
 Helm chart for deploying [Codefresh Runner](https://codefresh.io/docs/docs/installation/codefresh-runner/) to Kubernetes.
 
@@ -1155,7 +1155,7 @@ Go to [https://<YOUR_ONPREM_DOMAIN_HERE>/admin/runtime-environments/system](http
 | runner.affinity | object | `{}` | Set affinity |
 | runner.enabled | bool | `true` | Enable the runner |
 | runner.env | object | `{}` | Add additional env vars |
-| runner.image | object | `{"digest":"sha256:f7768390d3368aff0843519368c10a0a97cf98a98f2753a89509cf8f6c9798e1","registry":"quay.io","repository":"codefresh/venona","tag":"1.10.2"}` | Set image |
+| runner.image | object | `{"digest":"sha256:2327a1af2b8ad13e9685e7e577c2aa0d23580657c8da001f436f803280879eab","registry":"quay.io","repository":"codefresh/venona","tag":"1.10.8"}` | Set image |
 | runner.init | object | `{"image":{"digest":"sha256:27281df44814d837fbcc41ba53ee8010ce5496eb758c29f775958d713c79c41a","registry":"quay.io","repository":"codefresh/cli","tag":"0.85.0-rootless"},"resources":{"limits":{"cpu":"1","memory":"512Mi"},"requests":{"cpu":"0.2","memory":"256Mi"}}}` | Init container |
 | runner.nodeSelector | object | `{}` | Set node selector |
 | runner.podAnnotations | object | `{}` | Set pod annotations |
diff --git a/charts/cf-runtime/values.yaml b/charts/cf-runtime/values.yaml
index d4635bb1..f6af2905 100644
--- a/charts/cf-runtime/values.yaml
+++ b/charts/cf-runtime/values.yaml
@@ -72,8 +72,8 @@ runner:
   image:
     registry: quay.io
     repository: codefresh/venona
-    tag: 1.10.2
-    digest: sha256:f7768390d3368aff0843519368c10a0a97cf98a98f2753a89509cf8f6c9798e1
+    tag: 1.10.8
+    digest: sha256:2327a1af2b8ad13e9685e7e577c2aa0d23580657c8da001f436f803280879eab
   # -- Init container
   init:
     image: